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Sir: 



INFORMATION DISCLOSURE STATEMENT UNDER 37 C.F.R. S 1.97(b) 



Pursuant to 37 C.F.R. §§1.56 and 1.97(b), applicants bring to the Examiner's 
attention the documents listed on attached Form PTO/SB/08 and cited in the 
international search report. Copies of the listed foreign patent documents and listed 
non patent literature documents are attached. Applicants respectfully request that the 
Examiner consider the documents listed on attached Form PTO/SB/08 and indicate that 
they were considered by making an appropriate notation on this form. 

This Information Disclosure Statement is being filed with the above-referenced 
application. 



MP5 RficVf POT/PTO 2 7 SEP 200fT 



Customer No. 22,852 
Attorney Docket No. 09952.0074 

The following is listed on the accompanying PTO/SB/08 and is in a non-English 
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language: w 

1 . FREISS et al.; "EINBRECHERALARM INTRUSION DETECTION MIT 
SNORT"; CT Magazine Fuer Computer Technik, Vol. 1, No. 8, pages 212-219, 
(2001) 

In lieu of a statement of relevance or the translation of the non-English 
document, enclosed is an English-language international search report from the 
European Patent Office in the PCT international application, from which this national 
phase U.S. application is derived, citing this document and setting forth the relevance 
thereof. 

This submission does not represent that a search has been made or that no 
better art exists and does not constitute an admission that each or all of the listed 
documents are material or constitute "prior art." If the Examiner applies any of the 
documents as prior art against any claim in the application and applicants determine 
that the cited documents do not constitute "prior art" under United States law, applicants 
reserve the right to present to the Office the relevant facts and law regarding the 
appropriate status of such documents. Applicants further reserve the right to take 
appropriate action to establish the patentability of the disclosed invention over the listed 
documents, should one or more of the documents be applied against the claims of the 
present application. 
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If there is any fee due in connection with the filing of this Statement, please 
charge the fee to our Deposit Account No. 06-0916. 



Respectfully submitted, 



FINNEGAN, HENDERSON, FARABOW, 
GARRETT & DUNNER, L.L.P. 



Dated: September 27, 2006 By: 
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Cite 
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WO-02/061510A2 


08-08-2002 


LANCOPE, INC. 
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TELECOM ITALIA S.pA 
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Cite 
No. 1 


Include name of the author (in CAPITAL LETTERS), title of the article (when appropriate), title of the item 
(book, magazine, journal, serial, symposium, catalog, etc.), date, page(s), volume-issue number(s), 
publisher, city and/or country where published. 
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NORTON et al.; THE NEW SNORT"; Computer Security Journal Computer Security, Vol. 19, No. 3, pages 

37-47, (2003) 








FREISS et al.; "EINBRECHERALARM INTRUSION DETECTION MIT SNORT; CT Magazin Fuer Computer 

Technik, Vol. 1, No. 8, pages 212-219, (2001) 
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FREDERICK; "NETWORK INTRUSION DETECTION SIGNATURES, PART 5"; Security Focus HOME 
Infocus, retrieved on November 25, 2004 from http://securityfocus.com/infocus/1569>, pages 1-4, (2002) 








ZHANG et al.; "DETECTING BACKDOORS"; retrieved on November 24, 2004 from 
nttp://citeseer.ist.psu.edu/rd/0% 
pers/cs/14185/http:zSzzSzwww.aciri.orgzSzvernzSzpap 

pages 1-11, (2000) 








SUN et al.; "STATISTICAL IDENTIFICATION OF ENCRYPTED WEB BROWSING TRAFFIC"; Proc. of IEEE 
Symposium on Secruity and Privacy, 13 pages( 2002) 
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EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609. Draw line through 
citation if not in conformance and not considered. Include copy of this form with next communication to applicant. 



